special all-nacl.bash and test/run-nacl that run just the tests known to work under nacl. the rest requires closures. fix another bug or two in syscall. R=r DELTA=420 (410 added, 8 deleted, 2 changed) OCL=34882 CL=34907
